As cited
Copy frozen at (site build).
vulnerabilities
NCSC-2026-0433 Vulnerabilities Fixed in IBM Guardium Data Protection
IBM released patches for multiple vulnerabilities in Guardium Data Protection versions 12.0, 12.1, and 12.2, including remote code execution via path traversal, SQL injection flaws, and heap-based and stack-based buffer overflows in components such as the MongoDB protocol parser and TDS PRELOGIN packet decoder. Unauthenticated attackers can exploit these flaws to execute arbitrary code, access or modify sensitive data, and trigger denial of service conditions. The vulnerabilities affect the confidentiality, integrity, and availability of systems running Guardium.
Why it matters: Organizations running Guardium Data Protection 12.0, 12.1, or 12.2 need to apply patches immediately to prevent unauthenticated remote code execution and data compromise.
- Source published
- First seen by Cybersecurity Tracker